CVE-2024-37396

概要

参考情報

• evms.edu/research/resources_services/redcap/redcap_change_log · Release Notes
• trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396 · Exploit
• trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt · Exploit

redcap のその他の脆弱性

• CVE-2024-55374中 5.3REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.
• CVE-2024-37395中 5.4A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbit…
• CVE-2024-37394中 5.4A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary…
• CVE-2025-23113高 8.8An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a…
• CVE-2025-23112中 6.1An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious s…